$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: ql7ZT3RAhXQHSwN7BmqBkO/C1BNkAzAkS+rROAsadFw= Subject key identifier: AF:94:14:D7:66:4E:BA:E6:59:DE:F9:CE:D7:DD:E2:52:A6:EB:3B:F2 Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 03A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 0399 Signing time: Thu 01 May 2025 00:20:58 +0000 Manifest this update: Thu 01 May 2025 00:20:58 +0000 Manifest next update: Thu 08 May 2025 00:20:58 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: +XrSIULScmlU9ZatRjMNyEzNHT9jOvEjDwtfsIOWLWM=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: o33RNCZroDwsAJGcMgsni5M3q2cYV8AkaewWNhrky5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: May 1 00:20:58 2025 GMT Not After : May 8 00:20:58 2025 GMT Subject: CN=6812be6a-2282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:07:e9:b3:23:ba:6b:ee:ab:52:01:c4:23: 54:85:fd:20:0c:d4:8f:6e:71:aa:72:58:e9:1e:db: e1:e7:a8:f8:08:83:4a:e3:02:95:c9:de:9a:24:b6: 86:1a:03:27:4b:65:93:d6:f5:79:88:65:5a:50:7f: fe:76:ec:10:ab:46:54:32:68:72:3e:95:af:c2:76: 7e:ba:4b:0d:03:f1:94:e1:e5:98:ce:a9:72:5c:fa: 36:c4:a0:80:c5:6a:f7:e7:e4:e0:77:80:a8:04:ce: 2f:4f:b8:fa:ba:1a:44:51:3d:b5:5a:8a:aa:8c:33: d7:1e:8f:23:7f:43:7c:01:f1:d8:0c:92:c3:75:6c: f9:da:17:97:63:21:a7:32:af:94:45:9a:e0:7b:30: 3e:d2:4f:65:4c:a1:4d:17:f0:92:70:ae:7d:e9:30: 42:21:61:e3:6e:05:4a:e8:61:2b:58:16:01:71:08: 52:a9:8c:c0:53:f6:83:12:db:86:e7:cb:08:dd:dd: 9d:10:4f:6b:06:95:57:35:7d:87:47:e8:d9:fd:23: 92:59:ee:8f:45:5d:33:da:df:7f:a8:b7:e3:2f:08: 1e:4f:8c:ff:e2:05:97:e5:58:b5:7e:b1:3b:22:61: d7:77:96:7f:e6:b6:36:3a:f8:31:47:c8:e7:0f:da: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:94:14:D7:66:4E:BA:E6:59:DE:F9:CE:D7:DD:E2:52:A6:EB:3B:F2 X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:3c:c9:c9:a4:b9:0e:86:06:06:9c:cc:f8:be:b5:2b:9e:d8: 80:66:8c:b7:67:94:4e:28:3b:41:d9:04:3c:bd:12:15:a5:5e: a8:73:d4:78:e9:8e:27:03:fa:c9:eb:db:62:76:ba:0f:b4:85: 56:e2:57:ad:15:d3:b7:2c:ad:ed:32:46:2f:07:96:36:e9:89: b7:b8:62:b0:75:96:90:6e:96:f4:fa:4d:92:35:32:6e:8c:19: 2b:05:70:8c:7d:d7:ae:a3:ec:b1:0f:15:3a:c0:bb:60:27:f7: df:f6:17:c0:94:0d:1a:e6:2f:59:13:46:fb:26:3a:53:08:06: 10:e4:6d:3c:35:c0:8c:f4:3a:c8:f5:45:e7:0b:2a:84:72:6d: 74:a5:61:13:1e:43:45:85:35:bc:61:11:35:a4:b9:1f:9c:26: 15:d2:b4:d6:c6:c5:63:98:5c:09:69:fd:d2:8a:2b:d9:d7:c6: 2b:48:ca:8e:65:ee:c6:fc:40:c6:c5:1e:de:b8:48:ba:0f:56: 6e:d9:82:33:6d:f9:49:e1:2e:1f:cf:50:f3:b0:f9:ed:d2:eb: e4:19:84:d9:34:3c:27:ee:c8:73:e7:04:07:6d:11:6d:09:86: 4d:2a:9e:98:97:27:87:58:12:6a:6a:5d:10:d0:68:e1:8b:dc: e5:d4:71:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjUwNTAxMDAyMDU4WhcNMjUwNTA4MDAyMDU4WjAYMRYwFAYD VQQDEw02ODEyYmU2YS0yMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsX8H6bMjumvuq1IBxCNUhf0gDNSPbnGqcljpHtvh56j4CINK4wKVyd6aJLaG GgMnS2WT1vV5iGVaUH/+duwQq0ZUMmhyPpWvwnZ+uksNA/GU4eWYzqlyXPo2xKCA xWr35+Tgd4CoBM4vT7j6uhpEUT21WoqqjDPXHo8jf0N8AfHYDJLDdWz52heXYyGn Mq+URZrgezA+0k9lTKFNF/CScK596TBCIWHjbgVK6GErWBYBcQhSqYzAU/aDEtuG 58sI3d2dEE9rBpVXNX2HR+jZ/SOSWe6PRV0z2t9/qLfjLwgeT4z/4gWX5Vi1frE7 ImHXd5Z/5rY2OvgxR8jnD9qkMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+UFNdm TrrmWd75ztfd4lKm6zvyMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApPMnJpLkOhgYGnMz4vrUrntiAZoy3Z5ROKDtB2QQ8vRIVpV6oc9R4 6Y4nA/rJ69tidroPtIVW4letFdO3LK3tMkYvB5Y26Ym3uGKwdZaQbpb0+k2SNTJu jBkrBXCMfdeuo+yxDxU6wLtgJ/ff9hfAlA0a5i9ZE0b7JjpTCAYQ5G08NcCM9DrI 9UXnCyqEcm10pWETHkNFhTW8YRE1pLkfnCYV0rTWxsVjmFwJaf3SiivZ18YrSMqO Ze7G/EDGxR7euEi6D1Zu2YIzbflJ4S4fz1DzsPnt0uvkGYTZNDwn7shz5wQHbRFt CYZNKp6YlyeHWBJqal0Q0Gjhi9zl1HES -----END CERTIFICATE-----Generated at Thu May 1 21:04:25 2025 by rpki-client